web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Feb 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The skill utilizes shell scripts (init-artifact.sh and bundle-artifact.sh) to automate project setup. These scripts use standard tools like pnpm, npm, sed, and tar to manage files and dependencies. This behavior is consistent with the skill's primary purpose.
  • [EXTERNAL_DOWNLOADS] (SAFE): The scripts download standard frontend packages from the official npm registry. No unauthorized or suspicious remote sources were identified.
  • [INDIRECT_PROMPT_INJECTION] (LOW): The skill has an attack surface for indirect prompt injection as it processes user-provided project names and code. 1. Ingestion points: scripts/init-artifact.sh accepts a project name as a command-line argument. 2. Boundary markers: Absent. 3. Capability inventory: File system write operations, command execution via pnpm, and network access for package downloads. 4. Sanitization: Absent; input is used directly in shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 19, 2026, 05:23 PM